[rrd-users] Re: Monitor TCP Traffic (ftp, http, other..)

[Paul C. Williamson]

This has one basic assumption - that this information 
is logged somewhere.  By and large, most of the 
protocol information is not kept any place.  Having 
said that, you probably could do it using ipchains.  
There might be something for doing that in the contrib 
directory for mrtg.

Like I said on the mrtg list, you need ntop.  That 
uses RRDTool.  And it will listen for any traffic on 
your eth0 card.  That's useful only if your unix 
machine if the firewall/gateway/router for your 
network.

Paul

>>> "spiekey" <spiekey at hotmail.com> 03/01/02 19:28 PM >>>

Hello!

> You need to define what you mean by "monitor" and what your
> equipment will let you do.

By Monitor i mean that i have an SuSE7.3 Server and i wanna display its
traffic with a graph, like this:
http://people.ee.ethz.ch/~oetiker/webtools/rrdtool/gallery/at-01.html

just with the values (MB).

>
> I have addressed in detail some aspects of this type of traffic monitoring
in
>
> http://www.slac.stanford.edu/comp/net/netflow/SLAC-Netflow.html

exactly like that (but this is about breakdowns, isnt it?):
http://www.slac.stanford.edu/comp/net/netflow/tcpeach.html

was that done with rrdtool and snmp?

>
> Currently I am using netflow, however in the past I have done the same
thing
> with strategically placing rmon1 and rmon2 probes around the network.
>
> There are several vendors which provide products to do what you want. They
not
> only have the software but the hardware.
>
> Check some of the trade magazines, and go to a convention something like
> Networld+ Interop in May 2002.
>
> There is an awful lot to learn.

uffff, i know ;D

>
>
> Connie Logg - Network Anlyst - 650-926-2879
> Stanford Linear Accelerator Center
> MS 97; 2575 SandHill Road; Menlo Park CA 94025
> "Happiness is found along the way, not at the end of the road"
>
>
> -----Original Message-----
> From: spiekey [mailto:spiekey at hotmail.com]
> Sent: Friday, March 01, 2002 3:57 PM
> To: rrd-users at list.ee.ethz.ch
> Subject: [rrd-users] Monitor TCP Traffic (ftp, http, other..)
>
>
>
> hello!
> how would i use rrdtool (snmp) to monitor different protocolls?
> would i still use snmp, or would i rather use iptables, log it and then
> somehow use rrdtool?
> Or is there a MIB for that out there?
>
> Cheers, Spiekey
>
> --
> Unsubscribe mailto:rrd-users-request at list.ee.ethz.ch?subject=unsubscribe
> Help        mailto:rrd-users-request at list.ee.ethz.ch?subject=help
> Archive     http://www.ee.ethz.ch/~slist/rrd-users
> WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi
>

--
Unsubscribe mailto:rrd-users-request at list.ee.ethz.ch?subject=unsubscribe
Help        mailto:rrd-users-request at list.ee.ethz.ch?subject=help
Archive     http://www.ee.ethz.ch/~slist/rrd-users
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi



--
Unsubscribe mailto:rrd-users-request at list.ee.ethz.ch?subject=unsubscribe
Help        mailto:rrd-users-request at list.ee.ethz.ch?subject=help
Archive     http://www.ee.ethz.ch/~slist/rrd-users
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi